$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/CE6FBAEE813111EBA15FAC34C4F9AE02.roa File: CE6FBAEE813111EBA15FAC34C4F9AE02.roa (raw, json) Hash identifier: rIbZh/jQ1yXjYU2MMMsjeIUW2S3pUTUxQO7fw/2QDEA= Subject key identifier: 0A:4C:D9:8B:AA:F4:EF:CE:C9:11:F5:5D:5E:16:86:86:25:26:60:86 Certificate issuer: /CN=A91D4325/serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Certificate serial: 06BF Authority key identifier: 25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/CE6FBAEE813111EBA15FAC34C4F9AE02.roa Signing time: Tue 04 Nov 2025 22:42:02 +0000 ROA not before: Tue 04 Nov 2025 22:42:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141397 IP address blocks: 103.198.24.0/24 maxlen: 24 103.198.25.0/24 maxlen: 24 2403:1280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1727 (0x6bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4325, serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Validity Not Before: Nov 4 22:42:02 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690a813a-d9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:19:37:8e:24:1b:9a:b7:52:4e:d8:f5:7b:24: 05:f6:40:8c:7d:6d:56:57:b5:95:87:d8:a6:d0:7e: 25:90:8a:82:50:33:88:c0:14:f2:d5:65:f2:98:4e: 36:76:85:b1:7b:49:ca:9a:55:2d:f2:cb:68:cd:92: 3c:ad:2e:f5:6b:f4:e5:b3:dd:5b:d5:1f:37:30:28: 78:14:2c:12:ed:00:b5:63:4f:66:e5:7a:43:23:4d: fa:bc:b2:62:8a:21:d8:4c:8a:f7:dd:5b:c5:6d:1c: 0b:e6:cf:3b:76:b9:de:2e:c7:d1:b1:97:76:48:99: 28:81:f4:8f:06:e0:97:85:1c:15:03:13:b7:72:0e: 8f:41:12:f4:f9:70:ec:18:43:54:68:c0:fc:67:d9: 49:02:2d:26:c9:5c:34:1c:fa:01:f9:3e:6d:de:28: 1e:e7:50:10:7f:a1:90:eb:d1:ab:91:44:68:d6:c7: e0:32:ba:5c:5c:11:3b:0f:c4:cd:2f:db:92:b0:e8: 66:49:6b:ea:8f:90:46:5c:a2:5a:67:18:af:5b:69: 8d:43:17:b2:65:7e:82:96:fd:b6:2b:b6:9c:f6:c5: 8e:8b:29:8b:ce:6d:fd:13:31:95:66:fa:0d:7f:6d: c8:aa:1e:bc:1a:a6:06:38:a4:ff:4e:14:a8:44:a4: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4C:D9:8B:AA:F4:EF:CE:C9:11:F5:5D:5E:16:86:86:25:26:60:86 X509v3 Authority Key Identifier: keyid:25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/CE6FBAEE813111EBA15FAC34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.24.0/23 IPv6: 2403:1280::/32 Signature Algorithm: sha256WithRSAEncryption 07:68:ef:7f:e0:ae:96:f8:0f:ca:bf:80:16:d8:5b:82:7a:93: ac:78:41:df:70:08:da:a1:e2:2c:13:53:3b:58:a5:7a:87:48: 35:c0:7a:a6:5c:c1:67:6b:de:6b:aa:d9:00:01:03:91:cc:99: 6d:59:1d:88:c5:02:8f:eb:0f:66:84:12:67:d7:d5:62:d9:3b: e8:6b:39:54:e8:d0:42:46:47:e8:ac:ca:b1:60:81:fe:b1:27: a6:cd:ad:d9:54:a6:00:25:29:85:1d:c2:75:15:9c:ac:ea:59: e2:bf:56:63:64:5e:0e:31:cf:16:a3:b2:91:24:2c:f0:fe:7f: 60:36:f8:71:2a:71:37:6b:07:aa:aa:99:2c:32:2a:b4:66:06: 6b:f3:71:99:f2:9c:dd:aa:ab:da:bf:d1:ba:aa:04:55:86:c8: 05:0e:81:dd:9a:e4:2d:b0:96:a8:65:5d:a3:e5:06:54:86:84: 27:4b:ff:30:50:26:4f:14:15:0b:31:25:b5:0b:53:63:4a:e9: 37:06:c7:88:74:f3:62:6f:cb:84:5b:c2:b3:8b:c0:a9:ac:8c: 46:5f:d6:53:bd:d2:2c:a3:23:6e:1a:81:3e:99:55:90:d7:11: c5:54:b1:26:89:e0:e6:96:e9:6a:23:16:48:fb:d2:04:0f:2c: 09:99:a9:04 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzMjUxMTAvBgNVBAUTKDI1RkQ1QUM5OTlCMDM5NUU2QzBFQkQ1NjFFMUIxQjg4 RTBENjA3NjMwHhcNMjUxMTA0MjI0MjAyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhODEzYS1kOWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRk3jiQbmrdSTtj1eyQF9kCMfW1WV7WVh9im0H4lkIqCUDOIwBTy1WXymE42 doWxe0nKmlUt8stozZI8rS71a/Tls91b1R83MCh4FCwS7QC1Y09m5XpDI036vLJi iiHYTIr33VvFbRwL5s87drneLsfRsZd2SJkogfSPBuCXhRwVAxO3cg6PQRL0+XDs GENUaMD8Z9lJAi0myVw0HPoB+T5t3ige51AQf6GQ69GrkURo1sfgMrpcXBE7D8TN L9uSsOhmSWvqj5BGXKJaZxivW2mNQxeyZX6Clv22K7ac9sWOiymLzm39EzGVZvoN f23Iqh68GqYGOKT/ThSoRKT7AQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFApM2Yuq 9O/OyRH1XV4WhoYlJmCGMB8GA1UdIwQYMBaAFCX9WsmZsDlebA69Vh4bG4jg1gdj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDMyNS9FRDg1NjVFODgx MkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09WNXNEcjFXSGhzYmlPRFdC Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmMWF5Wm13T1Y1c0RyMVdIaHNiaU9EV0IyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQzMjUvRUQ4NTY1RTg4MTJGMTFFQjk0RDM4MTMyQzRGOUFFMDIvQ0U2RkJBRUU4 MTMxMTFFQkExNUZBQzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnxhgwDQQCAAIwBwMFACQDEoAwDQYJKoZIhvcNAQELBQAD ggEBAAdo73/grpb4D8q/gBbYW4J6k6x4Qd9wCNqh4iwTUztYpXqHSDXAeqZcwWdr 3muq2QABA5HMmW1ZHYjFAo/rD2aEEmfX1WLZO+hrOVTo0EJGR+isyrFggf6xJ6bN rdlUpgAlKYUdwnUVnKzqWeK/VmNkXg4xzxajspEkLPD+f2A2+HEqcTdrB6qqmSwy KrRmBmvzcZnynN2qq9q/0bqqBFWGyAUOgd2a5C2wlqhlXaPlBlSGhCdL/zBQJk8U FQsxJbULU2NK6TcGx4h082Jvy4RbwrOLwKmsjEZf1lO90iyjI24agT6ZVZDXEcVU sSaJ4OaW6WojFkj70gQPLAmZqQQ= -----END CERTIFICATE-----Generated at Wed Nov 5 00:22:05 2025 by rpki-client